Create AWS Cloud resources to support RDP into Amazon EC2 for Windows without any ingress security group rule.

[kunduso]

Using the "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore" IAM policy it is possible to connect to an Amazon EC2 instance using Session Manager. However that gives a commandline interface. For a GUI based experience on an Amazon EC2 for Windows instance. this is can be accomplished using Fleet Manager.
The steps are:

• continue on having the above managed policy attached to the IAM role to create the instance profile
• create a new IAM policy and attach to the role as described in https://docs.aws.amazon.com/systems-manager/latest/userguide/fleet-rdp.html
• create the security group with no ingress rule and open the egress for all ports on the tcp protocol
• create a local user and add it to the Administrators group on the Windows instance using user data
• login to the Amazon EC2 instance using Fleet Manager